HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Hospitality Staffing Solutions

bd_acd106038107e8c9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 2, 2023

Filed

Aug 7, 2023

To disclose

9 weeks

Affected

7state residents only

Linked

8 records

Confidence

67%

Full breach record for Hospitality Staffing Solutions →2 incidents on file

Hospitality Staffing Solutions LLC notified individuals of a data security incident discovered on June 2, 2023, where an unauthorized third party accessed network files containing names, SSNs, driver's license numbers, and financial account numbers. The company enhanced security protocols and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d9 weeks discovery → filing

Incident timeline

discovery → filing · 9 weeks / 66 days

Jun 2, 2023

Discovered

Aug 7, 2023

Filed

vs. sector median

10 wks faster

This filing is one of 8 records about the same incident.View merged incident

A leak claim by akira about this victim was first seen 39 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_7744dd63c753aaa72023-06-29 · +39dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_2ea121632b46421f2023-08-07Verified
Maine State AGbd_472b13a1a5db8fcb2023-08-07Verified
Massachusetts State AGbd_8c7a11019cf52f5e2023-08-07Verified
Indiana State AGbd_1c1fed049d1872cf2023-08-02 · +5dCandidate

Show 2 more filings ↓up to 11d gap

New Hampshire State AGbd_8ad25f318974f46d2023-08-16 · +9dVerified
South Carolina State AGbd_f37faa0d2722614c2023-08-18 · +11dVerified

Name: Hospitality Staffing Solutions
norm: hospitality staffing
Domain: hssstaffing.com

Name: Hospitality Staffing Solutions
norm: hospitality staffing
Domain: hssstaffing.com
Industry: Professional Servicesllm

Discovered: Jun 2, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Implemented additional security measures to enhance our existing cybersecurity protocols
Offering you a complimentary one-year membership to Experian’s IdentityWorks
Changes made: Implemented additional security measures to enhance our existing cybersecurity protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGAug 2 · first

California State AG+5d

Maine State AG+5d

Massachusetts State AG+5d

Montana State AG+5d · this page

New Hampshire State AG+14d

South Carolina State AG+16d

Pattern: first filing Aug 2 (IN), last Aug 18 (SC) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-526.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 7, 2023
Raw hash: 5434b60ba7ddc0e98650f3ab248bdb874e9ae8163063c2af8c9daf2bdae1d60d

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityHospitality Staffing Solutions

Victim entityHospitality Staffing Solutions

Incidentdiscovered Jun 2, 2023

Stated responseImplemented additional security measures to enhance our existing cybersecurity protocols

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov